Kerberos on Windows

Z MetaCentrum
Skočit na navigaci Skočit na vyhledávání
Metacentrum wiki is deprecated after March 2023
Dear users, due to integration of Metacentrum into https://www.e-infra.cz/en (e-INFRA CZ service), the documentation for users will change format and site.
The current wiki pages won't be updated after end of March 2023. They will, however, be kept for a few months for backwards reference.
The new documentation resides at https://docs.metacentrum.cz.
Related topics
Kerberos authentication system

ZarovkaMala.png Note: You can also use "Kerberos on Windows" in Windows Subsystem for Linux (recommended). In this case you can follow instructions on the page Kerberos on Linux.

These tutorials work on Windows 8.1, other versions of Windows may need slight changes.

In case you have installed WSL - Windows subsystem for Linux you can use Kerberos_on_Linux

Installation

1. Download & install Kerberos.

Download the latest Kerberos release from the MIT page and install it.

2. Enable hidden items

You have to enable hidden items in order to see the ProgramData folder needed in the next step. WindowsKerberos1.png

3. Edit kr5.ini file

Download/copy the /etc/krb5.conf from tarkil.metacentrum.cz or another frontend.

ZarovkaMala.png Note: Save the file as "krb5.ini" with quotation marks to force .ini file extension

and save it as/to C:\ProgramData\MIT\Kerberos5\krb5.ini (you need administrative privileges to do so).

Usage

1. Open MIT Kerberos

WindowsKerberos2.png

2. Get a new ticket

WindowsKerberos3.png

3. Fill in MetaCentrum username and password

WindowsKerberos4.png

and click OK

You should see a valid Kerberos ticket now and if you did everything right, you should not need to type in your password during login phase (e.g. when using PuTTY):

WindowsKerberos5.png